Privacy Policy

This Privacy Policy describes how futuRe:ply, operated by CV Seperti Anda, a Commanditaire Vennootschap (Persekutuan Komanditer) registered in the Republic of Indonesia ("we," "our," or "us"), collects, uses, and protects personal information in connection with our websites, products, and services.

We comply with the Republic of Indonesia's Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi, "UU PDP"), and where applicable, the European Union's General Data Protection Regulation ("GDPR") and other equivalent frameworks.

1. Information We Collect

We collect personal information in the following circumstances:

Information you provide directly:

• Contact information (name, email, phone number, company) when you fill out forms, schedule calls, or contact us
• Communications you send to us via email, forms, or scheduled calls
• Information you provide during onboarding and engagement with our services
• Payment and billing information when you purchase services

Information collected automatically:

• IP address, browser type, device information, and operating system
• Pages visited, referral sources, and time spent on our website
• Cookies and similar tracking technologies (see Section 6)

Information from third parties:

• Analytics and advertising service providers (aggregated only)
• Publicly available information relevant to our services

2. How We Use Information

• Responding to inquiries and providing requested information
• Delivering, maintaining, and improving our products and services
• Processing payments and managing client relationships
• Complying with legal obligations and enforcing our terms
• Communicating about our services, updates, and relevant offerings (with the ability to opt out of marketing communications at any time)
• Analyzing website usage to improve user experience
• Detecting, preventing, and addressing fraud, security, and technical issues

3. Legal Basis for Processing

Under UU PDP and, where applicable, GDPR, we rely on the following legal bases for processing personal data:

• Consent: When you have given clear consent for a specific processing purpose
• Contract: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legal obligation: When processing is necessary to comply with legal obligations
• Legitimate interests: When processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests

4. Sharing of Information

We do not sell your personal information. We share personal information only in the following circumstances:

• Service providers: With vendors and service providers who process data on our behalf (such as hosting providers, analytics services, and payment processors), under appropriate confidentiality and data processing agreements
• Legal compliance: When required by law, court order, or government authority
• Business transfers: In connection with mergers, acquisitions, or asset sales, subject to the acquirer honoring this Privacy Policy
• With your consent: In any other circumstances with your explicit consent

We require all third parties handling personal data on our behalf to implement appropriate technical and organizational security measures.

5. International Data Transfers

We are based in Indonesia and may transfer personal data to service providers located in other jurisdictions, including the European Union, the United States, and Singapore. Where such transfers occur, we implement appropriate safeguards, including standard contractual clauses and adequacy determinations where applicable.

6. Cookies and Tracking Technologies

Cookies and similar technologies on our website fall into the following purposes:

• Strictly necessary cookies: Required for the website to function
• Analytics cookies: To understand how visitors use our site. We use Google Analytics 4 (Google) and Microsoft Clarity (Microsoft), which may set cookies and, in Clarity's case, record anonymized session interactions (clicks, scrolls, navigation) to produce heatmaps. These are loaded only after you accept our cookie notice; if you decline, they are not loaded.
• Preference cookies: To remember your preferences and settings, including your analytics choice

We ask for your consent before loading analytics cookies, and you can change your choice at any time via the "Cookie preferences" link in the site footer. You can also control cookies through your browser settings. Disabling certain cookies may affect website functionality.

7. Data Retention

• Inquiry data: Retained for 24 months after last contact
• Client engagement data: Retained for the duration of the engagement plus 7 years for legal, tax, and audit purposes
• Website analytics data: Retained for 26 months in aggregated form
• Marketing communication preferences: Retained until you withdraw consent

8. Your Rights

Under UU PDP, GDPR, and equivalent frameworks, you have the following rights concerning your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data, subject to legal retention requirements
• Restriction: Request that we restrict processing in certain circumstances
• Portability: Request your data in a structured, commonly used, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdrawal of consent: Withdraw consent for processing based on consent, at any time

To exercise these rights, contact us using the details in Section 12. We will respond within 30 days. You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

9. Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements for our systems
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

No security measures are perfect. If we become aware of a data breach affecting your information, we will notify you and relevant authorities as required by law.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, providing additional notice. Continued use of our services after changes indicates acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

futuRe:ply — CV Seperti Anda
Jakarta, Republic of Indonesia
Email: contact@futureply.com

For UU PDP-specific inquiries, you may reach us at the same address: contact@futureply.com.